CVE Database
/

CVE-2010-4001

Back to search

CVE-2010-4001

Published: Nov 5, 2010

Modified: Aug 7, 2024

PUBLISHED

Description

GMXRC.bash in Gromacs 4.5.1 and earlier places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory. NOTE: CVE disputes this issue because the GMXLDLIB value is always added to the beginning of LD_LIBRARY_PATH at a later point in the script

VendorProductVersions

n/a

n/a

affected
n/a

References

ADV-2010-2971
vdb-entry
x_refsource_VUPEN
FEDORA-2010-17256
vendor-advisory
x_refsource_FEDORA
FEDORA-2010-17248
vendor-advisory
x_refsource_FEDORA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now